Improving CloudStack for operators

C l i c k t o e d i t

The Cloud Specialists ShapeBlue.com @ShapeBlue

Improving CloudStackfor Operators

Rohit YadavSoftware Architect

[email protected]@_bhaisaab | rohit.yadav.xyz

CloudStack European User Group, 3 March 2016

The Cloud Specialists

• Software Architect at ShapeBlue• Apache CloudStack Committer since 2012 and PMC member• Specialise in:

• CloudStack feature development and 3rd party integrations• KVM, API/DB Layers, SystemVMs, UI, Upgrades, UI• Distributed Systems, Java, Python

• Author: Apache CloudStack CloudMonkey• Release Manager: Apache CloudStack 4.5.x• Maintainer of Apache CloudStack packages (shapeblue.com/packages)• Recent work: Out-of-band management, Metrics Views, SAML2 plugin,

KVM and UI improvements

A b o u t M e

The Cloud Specialists

A b o u t S h a p e B l u e

“ShapeBlue are expert builders of public & private clouds. They are the leading global

Apache CloudStack integrator & consultancy”

…and we’re hiring!



I m p r o v i n g C l o u d S t a c k O p e r a t i o n a l E x p e r i e n c e ?

• Managing CloudStack users in large orgs• Finding critical information• Dealing with physical hosts• Dealing with security and user roles• Making sense of CloudStack API results• Pain points around Installing and Upgrading

CloudStack• Improving CloudStack Clustering



W h a t i s t h i s t a l k a b o u t ?

Improving CloudStack for Operators• Support for SAML2• Metrics Views for CloudStack• Out-of-band Management for CloudStack• CloudMonkey improvements• Dynamic CloudStack Roles (RBAC)• Upcoming features• Painpoints and improvements



S A M L 2

• SAML2 Single-Sign-On Plugin based on newer authentication framework in CloudStack

• Available in 4.5.2, 4.6.0+• Authorization based workflow• Demo


The Cloud Specialists @ShapeBlueShapeBlue.com

C l o u d S t a c k S A M L 2 A u t h e n t i c a t i o n W o r k f l o w



M e t r i c s V i e w s f o r C l o u d S t a c k

• Finding critical information about infrastructure and cloud resources using UI

• Identify performance hotspots• CloudMonkey works but operators like using UI• Available in 4.7.0+• Demo



O u t - o f - b a n d M a n a g e m e n t f o r C l o u d S t a c k

• Manage physical hosts using out-of-band management interface such as ilo, idrac

• Allows custom driver implementation, out of box support for IPMI 2.0

• Available in 4.9.0+• Demo



O u t - o f - b a n d M a n a g e m e n t h i g h - l e v e l a r c h i t e c t u r e

OOBM Power StateFinite State Machine



C l o u d M o n k e y I m p r o v e m e n t s

• CSV output: Making sense of data• History support• Available in 5.3.3 (upcoming)• Demo



U p c o m i n g f e a t u r e : D y n a m i c R B A C

• Improve RBAC, allow dynamic roles• Presently only four static roles:

Admin, Resource Admin, Domain Admin, User• Each role maps to set of allowed APIs, currently

statically configured in commands.properties• Operators can create users/account with new sets

of dynamic roles with custom set of allowed APIs



O t h e r E f f o r t s i n t h e C o m m u n i t y

• Dynamic routed VPC (support for OSPF)• Host HA with out-of-band based fencing• Distributed Resource Load-Balancer Service• CloudStack CI for Github PRs• Improve CloudStack installation and upgrade

experience specifically around database and systemvms

• SDN plugin improvements, StrongSwan based VPN/ipsec, Debian 8 based systemvm template, support Java 8, embedded Jetty. Marvin and UI improvements



I m p r o v i n g C l o u d S t a c k C l u s t e r i n g

• Better distributed systems implementation; claim&ownership, improved fault-tolerance and resilience, clustering and agent rebalancing, circuit breaker, mgmt server fencing

• Improve CloudStack agents framework, improve/replace link protocol

• Improve job framework• Zero-downtime upgrades



T h a n k y o u !

• Q&A• Follow-ups - [email protected]

Date post:	17-Jan-2017
Category:	Technology
Upload:	shapeblue
View:	635 times
Download:	3 times

Improving CloudStack for operators

Technology